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Based on the controlled order rearrange encryption (CORE) for quantum key dis- 
tribution using EPR pairs[Fu.G.Deng and G.L.Long Phys.Rev.A68 (2003) 042315], 



we propose the generalized controlled order rearrangement encryption (GCORE) 
protocols of N qubits and N qutrits, concretely display them in the cases using 
3-qubit, 2-qutrit maximally entangled basis states. We further indicate that our 
protocols will become safer with the increase of number of particles and dimensions. 
. Moreover, we carry out the security analysis using quantum covariant cloning ma- 

o . 

chine for the protocol using qutrits. Although the applications of the generalized 

O" 

C**"" ' scheme need to be further studied, the GCORE has many distinct features such as 

|: 



great capacity and high efficiency 
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I. 

I. INTRODUCTION 

Cryptography is an art of providing secure communication over insecure communication 
channels. Now, in the information community, the safety of transmission of secret infor- 
mation is getting more and more important. One essential theme of secure communication 
is to distribute secret keys between sender and receiver. Quantum cryptography (QC) is 
secure based on the fundamental principles of quantum mechanics rather than classical cryp- 
tography. An important application of QC is the quantum key distribution (QKD), which 
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concerns the generation and distribution of secret key between two legitimate users. The 
security of key distribution is the most important part in the secret communication. QKD 
exploits quantum mechanics principles for the secret communication, which provides a se- 
cure way for transmitting the key. So far, there are many quantum secret key protocols such 
as BB84 protocol, Ekt91, B92, six-state protocol etc. [1-5], and some new quantum secret 
key protocols [6-12] are continually suggested. 

The security of some QKD protocols in Refs. [1,2,3,6,10-14] are based on random choices 
of different measuring-base, so the randomness is usually a useful ingredient in QC. The 
security of other some QKD protocols in Refs. [7,8,15-17] lies on the nonlocality nature of 
quantum systems. Goldenberg-Vaidman scheme [7] first presents QKD protocol by two 
transmission lines. This protocol uses orthogonal states and has full efficiency, all the parti- 
cles transmitted are used to generate secret keys. Then, Koashi-Imoto protocol [8] improves 
Goldenberg-Vaidman scheme by using an asymmetric interferometer to reduce the time 
delay. However, two factors lead that these schemes' time delay can not be too short. Sub- 
sequently, F.G.Deng and G.L.Long propose a controlled order rearrange encryption (CORE) 
scheme [9] to overcome this drawback and realize a secure QKD. In the nonlocality based 
QKD protocols, orthogonal quantum states are used. Security is assured by not allowing an 
eavesdropper such as Eve to acquire both parts simultaneously. 

Actually, the CORE technique is implemented not only suitable to use Einstein- Podolsky- 
Rosen (EPR) pairs, but also suitable to use other quantum information carriers (QICs) [9]. 
In recent years researchers have drawn their attentions to the QKD protocols that involve 
multilevel systems with two parties, or multiple parties with two-level systems. A pursuit 
motivation of multilevel QKD is that more information can be carried by each particle 
thereby the information flux is increased, and some multilevel protocols have been shown 
to have greater security against eavesdropping attacks than their qubit-based countparts 
[16,18,19]. Thus, the use of multi-particle maximally entangled state can guarantee the 
security further and has higher efficiency in general. 

In this paper, our main purpose is to generalize the CORE of QC to multi-particle 
and/or high dimension quantum systems. Our generalized protocols can be thought of 
having higher efficiency because the generalized protocols, which is called as the GCORE of 
QC here, exploit the facts that a possible eavesdropper with no access to the whole quantum 
system at the same time, cannot recover the whole information without being detected, and 
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the protocols employ a larger alphabet, a few- dimensional orthogonal basis of pure state. 
Consequently, we obtain the full efficiency from this point of view. The generalized protocols 
also have great capacity based on the reason that M adopted N- qudit maximally entangled 
states can send M\og 2 d N bits of information in our schemes if we assume there are N 
particles with each being d dimension. 

The paper is organized as follows. In Sec. II, we simply review the CORE protocol using 
EPR pairs provided by Fu. G.Deng and G.L.Long. Then we generalize the CORE protocol 
to iV-qubit case, specially, we present the GCORE protocol using 3-qubit state and check its 
security by the correlated matrix method. In Sec. Ill, the GCORE protocol using N qutrits 
is proposed, GCORE protocol using 2-qutrit is presented in detail. Moveover, we discuss 
the security of qutrit GCORE using the quantum covariant cloning machine. In Sec. IV, we 
present a uniform expression of multi-particle and/or high dimension situation. Advantages 
of GCORE are analogized and concluding remarks are given. 

II. GCORE USING iV-QUBIT MAXIMALLY ENTANGLED BASIS STATES 

A. Explanation of CORE protocol 

At the beginning, let us review briefly the meaning of CORE. Assume the keys are 
distributed between Alice and Bob. Before transmission, Alice rearranges the order of cor- 
related particles and sends them to Bob. The aim of random rearrangement is to prevent 
the eavesdropper obtaining correlated particles simultaneously from different transmission 
channels as possible as they can, and we also need an evening process to make transmis- 
sion in equal time intervals. Once Bob receives these particles, he restores the order of the 
particles and undoes Alice's operations by synchronizing their measure devices using repeat- 
edly a prior shared control key, so that he can make orthogonal basis measurement. The 
measurement outcome is exactly what Alice has prepared. The essence of CORE is use of 
a a control key as has been used in the modified BB84 scheme [6]. The noncloning nature 
ensures it viable. 

The whole process of CORE protocol using EPR states [9] has been demonstrated clearly 
in Ref. [9]. In the following contexts, we generalize it to multi-particle and high-dimensional 
cases, hence the generalized protocol is denoted as GCORE. 
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B. GCORE protocol using GHZ-basis states 

In the following, we firstly discuss concrete GCORE example using 3-qubit GHZ-basis 
states without loss of generalization. 

(i) Alice generates a sequence of GHZ-basis states (a±, bi, ci), • • • , (a m , b m , c m ) randomly, 
where (a^&^Cj) denotes one GHZ-basis state (1 < i < m,m is an integer) and every eight 
adjoining triplets are taken as one unit of QICs. Without loss of generality, we consider the 
first carrier unit [(ai, 61, Ci), (a 2 , b 2 , C2), • • • , (a 8 ,b 8 ,c 8 )} which are randomly in eight GHZ- 
basis states that can be expressed as [20]: 

l^> = ^(UU|o) c ±|3-iU|i> c ), (1) 

where j = j\j2 denotes binary notations. In their explicit forms, eight GHZ-basis states 
reads: 



w> = 


(|000) + 


\1U))/V2 


K"> = 


(|000) - 


|111»/V2 


K + > = 


(|010) + 


\m))/V2 


|VT> = 


(|010) - 


(101))/^ 


\^) = 


(|100) + 


|011>) /V2 


\K) = 


(|100) - 


|0H))/v^ 


W> = 


(|110) + 


1001))/^ 


K _ > = 


QUO) - 


|001))/v^) 



we indicate them by 000, 001, 010, 011, 100, 101, 110, and 111, respectively. 

(ii) Alice sends the three parts out in equal time intervals to Bob through three channels. 
Before these GHZ-basis states enter into the insecure transmission channel, their orders are 
rearranged by the GCORE system. Here are eight choices of GCORE operations, corre- 
sponding relations are the following: 

£ ^ 000, £i<->001, £ 2 ^010, £3^011 
£4^100, £? 5 <->101, £? 6 <->110, E 7 <->111 

and the GCORE is done for eight GHZ-basis states. Let us use permutation group notation 

to express them as following 
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, 12345671 , 
E = \ j E 1 

1 2 3 4 5 6 7; 

;i) (2) (3) (4) (5) (6) (7) (8) 




1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 

Ei—\ E% = 

3 4 1 2 7 8 5 6j ^4 3218765 

= (l 3)(2 4)( 5 7 )(6 8) =(l 4)( 2 3 )( 5 8)( 6 7) 



1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 

E\ = I />, 

5 6 7 8 1 2 3 4j ^87654321 

1 5)(26)(3 7) (4 8 ) =(l 8) (2 7)(36)(45) 



1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 

E 6 = I E 7 =\ 

7 8 5 6 3 4 1 2j ^65872143 

I 7] ( 2 s] ( 3 5) ( 4: 6] =^16^(^251^38)1 17 



we also show this protocol using Fig.l. 

Three quantum channels in this GCORE protocol are denoted upper, middle, and lower 
channel. The upper QIC parts are transmitted according to their temporal orders. A control 
key is used to rearrange the order of middle and lower QIC parts. For instance, the value of 
control key is 000, the operation E$ is applied. In Fig. 2 there are seven switches, the order 
of eight GHZ-basis states is unchanged with switch 1, 2, 3, 4, 5, 6, 7 in position (up, up, up, 
up, up, up, down). When the value of control key is 001, the operation E\ is performed, and 
it is done by putting the seven switches into position(down, up, up, up, up, up, down), (up, 
up, up, up, up, down,up), (down, up, up, up, up, up, down), (up, up, up, up, up, down, up), 
(down, up, up, up, up, up, down), (up, up, up, up, up, down, up), (down, up, up, up, up, up, 
down), (up, up, up, up, up, down, up) for eight particles, respectively. In fact, five switches 
are enough. When the operation E\ is performed, it is done by putting the five switches 
into posit ion (down, down, up, up, down), (up, down, up, down, up), (down, down, up, up, 
down), (up, down, up, down, up), (down, down, up, up, down), (up, down, up, down, up), 
(down, down, up, up, down), (up, down, up, down, up) for eight particles, respectively. The 
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FIG. 1: Example of GCORE using GHZ-basis states. There are eight different GCORE operations. 

effect of using seven switches is the same as that of using five switches. Similar combination 
can be written explicitly for operations E 2 , E 3 , E 5 , Eq, E 7 . 

Five switches 

ooooooo Up channel 



S-witcdl 




Down channel 



Seven switches 



oooccoo 






Up channel 




Swttchl/ \Su>itky 


\$withy 


\SwitAf 


\Swithy \swttfty \Swithp' \ 

xy^- qoqqq/ ocaxxy^ cmcnm)— 








\swithy' '''Switfi^/ \swithj/ \ 








OOOOO/ OCCQGQ/ OOOOOOO/^ 








Down channel 



FIG. 2: Devices to perform GCORE operations, the loop represents a time delay of a fixed interval. 

(iii) Bob undoes the effect of order rearrangement. At Bob' site, he just exchanges upper, 
middle, and lower parts of Alice's GCORE apparatus and the GCORE operations performed 
by Alice will be undone, (iv) Bob measures these carrier units to obtain the key. After these 
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particles are dearranged. Bob uses the GHZ-basis measurement to read out the information 
determinatively, which is exactly the same as Alice prepared one because the measurement 
here is orthogonal basis measurement and obviously the eight GHZ-basis states are mutually 
orthogonal. 

Remark: To prevent Eve from stealing, we need an evening process to ensure the same 
time interval between different batches of QICs travel. Now, we need three transmission 
lines to ensure the application of current proposed scheme because 3-qubit GCORE uses 
GHZ-basis state, and each particle transmitted through a quantum transmission line in 
equal time interval. It is obviously different from the case using two-transmission lines in 
Refs.[7,8]. Detailed analysis will be presented in subsection C below. In addition, the control 
keys can be used to control the GCORE operation of a group of units to reduce resources. 
For example, instead of using 001 controls GCORE operation of one unit of QICs (eight 
GHZ-basis states), we can use 001 to control more units of QICs consecutively, say 4 units 
or 32 GHZ-basis states. 



C. Security of GCORE using GHZ-basis states 



Let us look at the security of GCORE using 3-qubit GHZ-basis states. Eve has only 
1/8 chance to guess the right GCORE operation for the eight GHZ-basis states. If she 
uses a wrong GCORE operation, the three particles measured by her will be anticorrelated. 
Firstly we assume that A particle from the first GHZ-basis state, B particle from the second 
GHZ-basis state and C particle from the third GHZ-basis state are mistreated by Eve as a 
GHZ-basis state, then the density operator will be 



PAiB 2 C 3 = PA 1 ® PB 2 ® PCs 



(1 o^ 



V 2 / 



/I N 

V 2 / 
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(3) 



where p Al = Tt BiCi (pa 1 b 1 c 1 ) , Pb 2 = Tr A2 c 2 (pA 2 B 2 c 2 ) , pc 3 = Tia 3 b 3 {pa 3 b 3 c 3 )- When 
Pa 1 b 2 c 3 is measured in the GHZ-basis state, the result can be any one of eight GHZ-basis 
states with 12.5% probability each. Thus Eve will introduce 66.99% error rate in the results. 
Then we assume A particle from the first GHZ-basis state, B and C particles from the second 
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GHZ-basis state are mistreated by Eve as a GHZ-basis state, the density operator will be 



/ - \ 



PA X B 2 C Z = PA! <S> PB 2 C 3 



/I 



V 



<8> 








- 

2 



(4) 



Eve will introduce 76.56% error rate in these results. In both situations, Alice and Bob can 
detect Eve easily by checking a sufficiently large subset of results randomly chosen. Surely, 
Eve can perform a generalized Bell inequality measurement on the particles, but it is useless 
for decrypting the control key. Let us choose a(a x ,a y ,a z ), b (b x ,b y ,b z ), as the directions of 
Alice's and Bob's measurements, at the same time, c(c x ,c y ,c z ) is also Bob's measurement 
direction. Then the correlation operator can be written as following: 

E = (a ■ a) <g) (a ■ b) <g> (a ■ c) (5) 
1 \ / -i\ ( I ' 

io r- = L o r* = o-i 



where <7, 



The expectation values 



E [ a,b,c 



(a ■ a) <g> (a ■ b) <g> (a ■ c) 



are different for the different GHZ-basis 



states. They are 
E (a, b, c 
E ^a, b, c 
E (a, b, c 
E (a, b, cj 
E (^a, b, cj 
E (a, b, cj 



(a x - ia y ) (b x - ib y ) (c x - ic y ) + (a x + ia y ) (b x + ib y ) (c x + ic y ) 

- (a x - ia y ) (b x - ib y ) (c x - ic y ) - (a x + ia y ) (b x + ib y ) (c x + ic y ) 
(a x - ia y ) (b x + ib y ) (c x - ic y ) + (a x + ia y ) (b x - ib y ) (c x + ic y ) 

- (a x - ia y ) (b x + ib y ) (c x - ic y ) - (a x + ia y ) (b x - ib y ) (c x + ic y ) 
(a x + ia y ) (b x - ib y ) (c x - ic y ) + (a x - ia y ) (b x + ib y ) (c x + ic y ) 

- (a x + ia y ) (b x - ib y ) (c x - ic y ) - (a x - ia y ) (b x + ib y ) (c x + ic y ) 
E [a, b, cj ^ = (a x + ia y ) (b x + ib y ) (c x - ic y ) + (a x - ia y ) (b x - ib y ) (c x + ic y ) 
E (a, b, cj = -(a x + ia y ) (b x + ib y ) (c x - ic y ) - (a x - ia y ) (b x - ib y ) (c x + ic y ) (6) 

Note their coefficients are 1/2. 

For the product states |000) , |001) , |010) , |011) , |100) , |101) , |110) , |111), the expected 
values are: 



i>2 



O'zbzCz-, O'zbzCzi Q>zbzCzi &zbzCzi &zbzCzi &zbzC-zi dzbzCz) O'zbzCz (7) 
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respectively. If Eve takes general Bell inequality measurements on the three uncorrelated 
particles, she will get for a large number of measurements when the particles are randomly 
distributed among the eight GHZ-basis states. If Eve does take three correlated particles, 
she will also get when eight GHZ-basis states are taken with the equal probability. So 
Eve gets nothing about the control key except for guessing it randomly. Because the control 

37V 

key can be repeatedly used, the probability that Eve guesses the right control key is (|) fc , 
where 3N k is the number of bits in the control key. When N k = 100, the probability is 
(|) 100 , which is practically zero. Naturally, GCORE protocol is suitable to N-qubit setting 
scenario, too. iV-qubit maximally entangled basis states are defined as following [20]: 

|^> = ^(U>|0>±|2 JV - 1 -j-l)|l» (8) 

where j = j\32 • • • Jn-i denotes binary notations. Then there are 2 N different control keys, 
2^ operations corresponding to Eq, Ei, ■ ■ ■ E 2 n-i, and we need N quantum channels with 
^- + 1 = 2 JV_1 + 1 switches each. The eavesdropper Eve only guesses the right iV-GHZ-basis 
states with probability t^t, as the density operation is pab-n = ^h N x2 N - 

III. GCORE USING iV-QUTRIT MAXIMALLY ENTANGLED BASIS STATES 

One of the motivations of considering a high dimensional system for QKD is to increase 
the information per particle. Another context where using higher-dimension space might be 
advantageous is the key growing. However, the practical limitations might be more severe in 
realistic high- dimension cryptosystems, in particular the influence of the detector's quantum 
efficiency and dark count rate [21,22]. This has been discussed in the related Ref.[23]. Here, 
we start to consider the qutrit quantum system. 

A. GCORE protocol using 2-qutrit general Bell-basis states 

Here, let's consider the simplest scenario, two particles, each particle has three levels, i.e. 
a 2-qutrit system. On the whole, concrete four processes are similar to analysis in Sec. II. B. 
The recapitulation is presented in the following. As we know, the general Bell-basis states 
can be written as [24]: 

IVWn) = e2mj/3 M ® \j + m m ° d 3 > ( 9 ) 
3 
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where n, m,j = 0, 1, 2, the explicit expressions are then 



(|00) + |ll) + |22))/ v / 3 



(loo) + 



3 2i7r/3 



3 4i7r/3 



l^oo) 
l^io) 

|-02O> 
I^Ol) 

|"0O2> 

|^ 2 > = (|02)+e 2 -/ 3 
1^22) 



(|00) 

(|01) + |12) + 

(|01) +e 2-/3 

(|oi) + 



3 4i7r/3 



(|02) + |10) + 



(102) + 



3 4i7r/3 



4mt/3 



3 2i7r/3 



11) + e 

11) 

|20»/V3 

12) + e 4i7r/3 



3 2i7r/3 



12) 



|21»/V3 



10) + e 
10) 



4mt/3 



3 2mt/3 



22)) /VS 

22)) /V3 

20)) /VS 

20) ) />/3 

21) )/>/3 
21))/>/3 



(10) 



It is clear that these states are orthogonal. They can be presented by 00, 01, 02, 10, 11, 12, 
20, 21, 22, respectively. It can be shown that single-body operators Uy = 0, 1,2) will 
transform l^oo) into the corresponding other eight states. The expressions of these operators 
are: 



U, 



00 



01 



u 02 = 



/100 

1 
y0 1 

^001^ 

1 
1 



^0 10^ 



1 

1 



u 



10 



\ 



( 1 

e 2 ™/ 3 
y0 e 4 ™/ 3 

^ e 4 ™/ 3 ^ 

1 
y e 2 ™/ 3 

/ Q e 2?rj/3 



17: 



20 



\ 



;£7 



21 



;U 12 = 







V 1 
















/ 1 

e 4 ™/ 3 
v e 2 ™/ 3 

^ e 2 ™/ 3 ^ 

1 
y e 4 ^/ 3 

/ q e 4«/3 ^ 



;f/ 22 = 



/ 





V 1 








3 2tti/3 







(11) 



/ 



The GCORE operations using qutrit states are similar to the cases in Sec. II. However, there 
are nine choices of GCORE operations, corresponding relations are the following 

E <-> 00, E x <-> 01, E 2 <-> 02 
£ 3 <-> 10, £ 4 <-> 11, ^5 <-> 12 
£ 6 <-> 20, £ 7 <-> 21, £ 8 <-> 22 
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and the GCORE is done for every nine general Bell-basis states. These operations are 
denoted by the denotation of permutation group. 



En 



E 1 



I == 



E & 



Ex 



Er 



E 7 



123456789 
123456789 
1 l) (2 2) (3 3) (4 4 



123456789 
234567892 
L 2 ) ( 2 3 ) ( 3 4 ) ( 4 5 

123456789 
345678912 
1 3 )( 2 4 ) ( 3 5 ) ( 4 C 



123456789 
456789123 
1 4) (2 5) (3 6) (4 7 

123456789 
567891234 
1 5 )( 2 6) ( 3 7) ( 4 8 



123456789 
678912345 
6) (2 7) (3 8) (4 9 

123456789 
789123456 
1 7) (2 8) (3 9) (4 

12345678 9 
891234567 
1 8) (2 9) (3 l) (4 2 



5 5 



5 6 



5 7 



5 8 



5 9 



5 1 



5 2 



5 3 



6 6 



6 7 



6 8 



6 9 



6 1 



6 2 



6 3 



6 4 



7 7 



7 9 



7 1 



7 2 



7 3 



7 4 



7 5 



8 9 



8 2 



8 3 



8 4 



8 5 



8 6 



9 9 



9 1 



9 2 



9 3 



9 4 



9 5 



9 6 



9 7 



12 



123456789 
912345678 
19)(2l)(32)(^43j^54j^65j^76j^87j^9 
the permutation has been shown clearly in Fig. 3. Fig. 4 gives the main device to perform 
GCORE operation by a specific instance. 




•"20 



FIG. 3: Example of GCORE using 2-qutrit Bell-basis states; There are nine different GCORE 
operations 



qqq Up channel 




switch)/ '-^switchy^ ^witchy^ '--switchf^ Xswitchy^ \ 

o / no / err)/ oorrv 00000/ 

Down channel 





FIG. 4: Devices to perform GCORE operations, the loop represents a time delay of a fixed interval. 

According to Fig. 4, the upper QIC parts are transmitted according to their temporal 
order. A control key is used to rearrange the order of the lower QIC parts. For instance, the 
value of control key is 00, the operation Eq is applied. In Fig. 4 there are five switches, the 
order of nine general Bell-basis states is unchanged with switch 1,2,3,4 and 5 in position (up, 
up, down, up, up ). When control key is 01, E\ is performed, and it is done by putting the 
nine switches into position (down, down, up, up, down ), (up, down, up, up, up ), (up, down, 
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up, up, up ), (up, down, up, up, up ), (up, down, up, up, up ), (up, down, up, up, up ), (up, 
down, up, up, up ), (up, down, up, up, up ), (up, down, up, up, up ) for the nine particles, 
respectively. Similar combination can be written explicitly for E 2 , E 3 , E±, E 5 , E$, E7, E$. 
Now we can consider the cases of multi-particle and/or high-dimension quantum systems. 
Firstly the method is generalized to high dimension quantum system (d > 3) of two particles. 
Note that the (/-dimension Bell-basis states in a symmetric channel [8, 21, 23] are expressed 
as 

ivw) = J2 e2nijn/d b') ® \j + m mod rf > ( 12 ) 

where n, m,j — 0, 1, • • • d — 1. The unitary operator is 

U nm = e2nijn/d \j + m mod d ) 0' I (13) 
3 

which can transfer d-dimension Bell-basis state 

IVW = M ® \i) ( 14 ) 
3 

to other (/-dimension Bell-basis state \if) nm ), i.e. U nm |-0oo) = |VVim)- So we can use the 
same method like 2-qutrit GCORE to analyze this problem completely. Thus, we have 
presented the GCORE of two-particle high dimensional generalization, we will give multi- 
particle situation next. At first, we consider a less complicated three particle quantum 
system. For 3-qutrit quantum system, its generalized maximally entangled basis states are : 

Wm) = E e2mJk/3 ® \i + n mod 3 > ® \i + m mod 3 > ( 15 ) 

j 

where n,m,k — 0, 1, 2, the explicit expressions are then 

|Vo°o> = (|000) + |lll) + |222))/v / 3 
|O = (|001) + |112) + |220))/v / 3 
|Vo° 2 > = (|002) + |110) + |221))/v / 3 

|^22> = (|022) + e 4 ^ /3 1 100) + e 2 "^ 3 |222)) /v 7 ^ (16) 
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There are 27 corresponding GCORE operations, denoted by: 

E <-> 000, Ex «-> 001, £ 2 <-> 002, £ 3 <-> 100, £ 4 «-> 101, £ 5 «-> 102, £ 6 <-> 200, 
£ 7 ^201, ^8^ 202, E 9 ^010, En^Oll, E n «-> 012, £ 12 <-> 110, E 13 <-»• 111, 
£ 14 «-> 112, £ 15 «-> 210, £? 16 211, £ 17 212, £ 18 <-> 020, £ 19 «-> 021, E 20 «-> 022, 
£?ai «-> 120, £ 22 <-> 121, £ 23 <-> 122, £ 24 220, E 25 <-> 221, £ 26 <-> 222 

(17) 

Due to the complication of GCORE operations, more resources are needed, and the analysis 
of security also becomes more complicated. But the maximal advantage is the swell of secu- 
rity. And the probability that Eve guesses the right control key is near 0. The corresponding 
fig. 5 is given below. 
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FIG. 5: (a). Example of GCORE using 3-qutrit maximally entangled basis states; (b). Devices to 
perform GCORE operations, the loop represents a time delay of a fixed interval. 



Generally, a uniform expression of iV-qutrit maximally entangled basis state can be ex- 
pressed as the following form 

®---® \j + i N -i mod 3)/^ (18) 

where i\, ii • • • z'jv = 0, 1, 2. Similar analysis can be given, but there is a little difference. In 
short, there are 3^ different control keys, 3^ operations corresponding to E , Ex, ■ ■ ■ E 3 n_x, 
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and we need N quantum channels with 3^ 1 + 1 switches each. The eavesdropper only 
guesses the right general Bell-basis state with probability as the density operation is 

Pab-n = ^N-h N x3 N - 



B. Security of GCORE using 2-qutrit general Bell-basis states 



Now, let us look at the security of above GCORE protocol using 2-qutrit states. Eve has 
only 11.1% chance to guess the right GCORE operation for nine general Bell-basis states. If 
she uses a wrong GCORE operation, the two particles she measured will be anticorrelated. 
Assume that A particle from the general Bell-basis state, B particle from the second general 
Bell-basis state are mistreated by Eve as a general Bell-basis state, then the density operator 
will be 



PAiB 2 = PA! ® Pb 2 = 



;.. 

0-, 

3 / 



I 1 - ^ 

0-, 

3 / 



V 



(19) 



where p Al = Tr Bl (p Al B 1 ) , Pb 2 = Tr Aa (pa 2 b 2 ) ■ 

The result indicates that any one of the nine general Bell-basis states appears with 11.1% 
probability each. Thus Eve will introduce 79.01% error rates in the results. Alice and Bob 
can detect Eve easily by checking a sufficiently large subset of results randomly chosen. 
Surely, Eve can take the generalized Bell inequality measurement on the particles, but it is 
useless for decrypting the control key. There are eight (Hermitian) generators of SU (3), i.e. 
eight Gell-Mann matrices, which are defined by 
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Let us choose directions M and as the directions of measurement of Alice and Bob 
respectively, these measurements satisfy the orthogonal relations. The correlation operator 
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can be written as: 

E = S ■ M <g> S ■ N (20) 
The expectation values (^E (^M, N^j ^ — S ■ M <S> S ■ N are not equal for different 



general Bell-basis states. 



/ - -\ \ 2 / MiJVi - M 2 iV 2 + M 3 iV 3 + M A N A - M 5 N 5 



Voo 3 I +M 6 iV 6 - M 7 iV 7 + M 8 N 8 



ElM,N 



1 



V>oi 



/ 2.U,.Y; + 2.1/.-, A 2 - .U;;.V :i - V^MgiVg + 2.\/ (i .\ ; 

3 I +2M 7 N 5 + 2M 1 N 6 - 2M 2 N 7 + V3M 3 N 8 - M 8 N 8 

/ - -\ \ 1 / 2.\/, ; .V; - 2M 7 iV 2 - M 3 N 3 + V3M 8 N 3 + 2M 1 N 4 
E I M , N 1 > = — I 

V 7 7 3 y +2M 2 iV 5 + 2.\/;.V i; + 2M 5 N 7 - V3M 3 N 8 - M 8 N 8 

E (m, n)\ = ^±^MiA^i - ^^M 2 N 2 + ±=f^M 3 N 3 + ^M 8 N 3 

- ±±§^M 4 iV 4 + l±h&M 5 N 5 + §M 6 iV 6 - §M 7 iV 7 
+ 4tiM 3 iV 8 - ^M 8 N 8 

(e (m, N^j } = -±MfiM 4 N! - ±MfiM 5 N 2 - §M 3 iV 3 - |M 8 iV 3 

+ §M 6 iV 4 + §M 7 iV 5 + =±±^ M ± N 6 + ±4fiM 2 N 7 
-|M 3 iV 8 + \M 8 N 8 

(E (M, ^)) = § M eiVi - §M 7 iV 2 + ±±|^M 3 iV 3 - ^pM 8 7V 3 

- i=i^MiJV 4 - 1 =i^M 2 7V 5 - ±±f^M 4 /V" 6 
_l+i±/A MbNi _ V^zi M3Ns _ l+u/3 Mgi Y 8 

£ (m, iV) ^ = -iif^MiiVi + ±±f^M 2 iV 2 + i±|^M 3 A^ 3 + ^fpM 8 iV 3 

- i^M 4 iV 4 + 1^3M 5 Ar 5 + f M 6 iV 6 - §M 7 iV 7 
+ v|ziM 3 iV 8 - ^M 8 N 8 
E (M, N)} = ^¥4^ + ^!ip^M 5 jV 2 - |M 3 iV 3 + |M 8 iV 3 

+ §M 6 iV 4 + §M 7 iV 5 - i±f^ MxiVg + ±±|^ M 2 iV 7 
+ §M 3 iV 8 + |M 8 iV 8 

£ (M, iV) } = lM 6 N, - \M 7 N 2 + ^M 3 iV 3 - ^M 8 N 3 

- i±iv^M!iV 4 - ±±|^M 2 iV 5 - I^M^ (21) 
_i^lM 5 iV 7 - 4±W 3 iV 8 - i^M 8 iV 8 
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For product states |00) , |01) , |02) , |10) , |11) , |12) , |20) , |21) , |22), the expected values are 



2 ( r N*\ „ 2 / „ iV«\ „ 4 



respectively. Subsequently, it's easy to give the similar analysis like CORE using EPR pairs. 

The experimental realization about qutrit for quantum cryptography is important. Up 
to now, the experiment has achieved much progress to realize the production of general 
Bell-basis state [25,26]. For example, in order to produce the state 

|^oo) = (|00) + |ll) + |22))/v / 3 (22) 

one uses a unbiased six-port beam splitter [27] which is a device with the following property: 
if a photon enters any single input port (out of the three ports), there is equal probability 
that it leaves one of the three output ports to produce state. In fact, one can always construct 
a special six-port beam splitter with the distinguishing trait that the elements of its unitary 
transition matrix, T, are solely powers of the complex number, a = exp(^), namely, 
Tki = ■^a^ k ~ 1 ^ l ~ 1 \ It has been shown in Ref.[22] that any six-port beam splitter can be 
constructed from the above-mentioned one by adding appropriate phase shifters at its exit 
and input ports (and by a trivial relabeling of the output ports). The phase shifters in front 
of the input ports of beam splitter can be tunable and used to change the phase of the 
incoming photon. 



C. Security analysis of qutrit GCORE using the quantum cloning machine 

From now on, we will analyze the security of qutrit GCORE against individual attacks 
(where Eve monitors the qutrit separately). So far, a lot work about the analysis of security 
for BB84 or generalized BB84 protocol using cloning machine have been done [18,19,28]. 
These workers are significative. Fortunately, GCORE protocols are also propitious to analyze 
using these methods. For this case, we consider a fairly general class of eavesdropping attack 
based on (not necessarily universal) quantum cloning machine. It is known that such a 
cloning-based attack is the optimal eavesdropping strategy, that is, the best Eve can do is 
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to clone (imperfectly) Alice's qubit and keep a copy while sending the original to Bob [18]. 
An appropriate measurement of the clone (and the ancilla system) after disclosure of the 
basis enables Eve to gain the maximally possible information on Alice's key bit. 

We use a general class of cloning transformations which is defined in Refs.[18,19], the 
resulting joint state of the two clones (noted A and B) and of the cloning machine (noted 
C) is 

N-l 

\' } P) *■ ^ ] a m,nUm t n\lp) A \B m _ n ) 
m,n=0 
N-l 

= ^ ^ bm, nUrn, n |V ; )_B \-^ m ,— n ) A,C (^) 
m,n=0 

where 

N-l 

U mtn = Y,e 2m(kn/N) \k + m)(k\ (24) 

fc=0 

U mtn forms a group of qudit error operators, generalizing the Pauli matrices for qubit: m 
labels the shift errors (extending the bit flip a x ), while n labels the phase errors (extending 
the phase flip a z ). And 

N-l 

\B rn , n ) = N~^J2 e 2 ^ kn/N) \k)\k + m) (25) 

fc=0 

with < m,n < N — 1. Equation \B m>n ) defines the N 2 generalized Bell states for a pair of 
iV-dimensional systems. The final states of clone A, B are 

JV-l N-l 

m,n=0 m,n=0 
N-l N-l 

PB= Y I" 1 ' 11 \^,n) ^ m ' n ' = S V m > nUm > n 1^) M U l,n ( 26 ) 
m,n=0 m,n=0 

In addition, the weight functions of the two clones are related by 

Pm,n |^m,n| i Qm,n |^m,n| (^7) 

where a mi „, b mtn are two (complex) amplitude functions that are dual under a Fourier trans- 
form: 



b m , n 4E e 2m{nx ~ my)IN a m , n (28) 



x,y=Q 
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Assume that Eve clones the qutrit state that is sent to Bob. Then Eve will measure her 
clone in the same basis as Bob and her ancilla in the conjugate basis. For deriving Eve's 
information, we need first to rewrite the cloning transformation of these bases. If Alice sends 
any state \k) in the computational basis, the phase errors clearly do not play any role in the 
mixture p B , so the fidelity can be expressed as: 

N-l 

F=(k\p B \k) = Y,M 2 (29) 

n=0 

In the rest of this subsection, we will use this general characterization of cloning in order 
to investigate the state-dependent cloning of qutrit. Alice sends the input state belonging 
to a 3-dimensional space. For the doner to copy equally well the states of computational 
bases, we choose the amplitude a mi „ characterizing the doner, which must be of the form 

^ V X X ^ 



(30) 



y y y 

\Z Z Z J 

such a doner is phase covariant, which means it acts identically on each state of the com- 
putational base. 

The fidelity of the first clone (the one that is sent to Bob) when copying a state can 
be written, in general, as 

N-l N-l 

Fa = (iI>\Pa\iI>) = ^ \ a m,n\ 2 \(^\ ^m,n)\ 2 = ^ K^l U m,n\fpm,n)\ 2 (31) 
m,n=0 m,n=0 

That is Fa = v 2 + y 2 + z 2 . The Disturbances -D^and Da 2 o{ the first clone are: 

D Al = D A2 =x 2 + y 2 + z 2 (32) 

By view of equation 

1 iV " 1 

r _ J_ 2m(nx-my)/N /oo\ 

<J m ,n — / 4 C U>m,n \°° ) 

x,y=0 

we can obtain that, for the second clone, which is the maximum when y = z, and the fidelity 
is given by 

F B = ( v 2 + 2x 2 + Yly 2 + 8xy + Avy) /3 (34) 
Again, we get the same disturbances (minimal when y — z) given by 

D Bl = D B2 = (v 2 + 2x 2 + 3y 2 - Axy - 2vy) /3 (35) 
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For simplicity, it's natural to consider the following amplitude matrix [19] 

(36) 



( V X X ^ 



XXX 

y x x x j 

where v,x are real parameters that satisfy the normalization condition v 2 + 8x 2 = 1. It's 
easy to check that this doner's results in the same fidelity and same disturbance for any 
qutrit state: 

F = v 2 + 2x 2 D x = D 2 = 3x 2 (37) 

Of course we have the relation: F + D± + D 2 — 1. We can easily know that the symmetric 
universal qutrit doner is characterized by a fidelity of 3/4. Now, it is simple to analyze its 
security against an incoherent attack. Bob's fidelity is F = v 2 + 2x 2 and the corresponding 
mutual information between Alice and Bob (if the latter measures his clone in the good 
basis) [18] is given by 

Iab = log 2 3 + F log 2 F + (1 - F) log 2 (38) 

since two possible errors are equiprobable. The cloning fidelity for Eve is given by 

(v + 8a;) 2 + 2(y- xf 



E 



(39) 
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Maximizing Eve's fidelity using the normalization relation v 2 + 8x 2 = 1 yields the optimal 
doner 

x = \J F{l ~ F \ v = F (40) 

The corresponding optimal fidelity for Eve is 



F E = j + 3 (1 - F) + -y/2F(l-F) (41) 

Let us see how Eve can maximize her information on Alice's state. If Alice sends the state 
\k) (k = 0,1,2), then it is clear that Eve can obtain Bob's error simply by performing a 
practical Bell measurement (measuring only the m index) on BC. In order to infer Alice's 
state, Eve must distinguish between three states (|0) , |1) , |2)) with a same scalar product 
^Y^- for all pairs of states, regardless of the measured value of m. Consequently, Eve's 
information [18] is 

I AE = log 2 3 + F E log 2 F E + (1- F E ) log 2 (42) 
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As a result, Bob's and Eve's information curves intersect exactly where the fidelities 
coincide. That is, at F — F E — | + ■ 

T 

0. 25 

0. 2 
0. 15 

0. 1 
0. 05 

0* 3 0. 4 0. 5 0. 6 0. 7 F 

FIG. 6: Relation between fidelity and mutual information in which real curve represents mutual 
information between Alice and Eve; the dashed curve represents mutual information between Alice 
and Bob. 

Due to a theorem given by Csiszar and Korner [21], which provides a lower bound on 
the secret key rate. Concretely, it is sufficient that Iab > Iac in order to establish a secret 
key with a nonzero rate, if the one-way communication on the classical channel is used, this 
is actually a necessary condition. Consequently, the GCORE protocols cease to generate 
secret key bits precisely at the point where Eve's information attains Bob's information. 

We compute the disturbance D qutrit = 1 — F = | — ^ J ( or error rate) at which 
Iab — Iae {or F = Fe), that is, above which Alice and Bob can not distill a secret key 
any more by use of one-way privacy amplification protocol. While the disturbance for the 
protocol using qubit is D qubit = | ^1 — -^j , we can see D qubit < D qutTit easily. Thus we say 
that disturbance increases with the dimension, suggesting mutual information between Alice 
and Eve of qutrit cryptosystem is getting smaller than that of qubit cryptosystem under 
the same condition. In other words, Eve obtains less information in the qutrit scheme. Our 
analysis thus confirms a seemingly general property that qutrit scheme for QKD to be more 
robust against eavesdropping than the corresponding qubit scheme. 

IV. ANALYSIS AND CONCLUSION 

For m particles and/or higher dimension quantum systems, we can provide the uniform 
expression of maximally entangled basis states. Assume the number of particle is n, each 
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dimension is d, the maximally entangled basis states are 

Id,i2,-i„) = e 2 ^ jn/d | j) <g> | j + ii mod d) <g> |j + i 2 mod d) <g> • • • \j + i n mod d) /Vd 

(43) 

Similar analysis can be used, even if the dimension is not limited to 2, 3. If Eve wants 
to measure the states without disturbing the system only if they are eigenstates of the 
measuring operator, otherwise, she will produce errors at most of time. Meantime, Eve 
can only guess the control key randomly, she has no means to decipher the control key. 
In a word, the security of GCORE operation becomes better than ever. Like other QKD 
protocols using orthogonal states, one distinct feature of our scheme is its high efficiency. 
The information-theoretic efficiency defined in Ref.[16] is: 



where b s is the number of secret bits received by Bob, q t is the number of qubits used, and b t 
is the number of classical bits exchanged between Alice and Bob during the QKD process. 
The efficiency of any protocol for QKD, defined as the number of secret (i.e. allowing 
eavesdropping detection) bits per transmitted bit plus qubit, satisfies r] < 1. The protocol 
presented here becomes 100%, because b s = d N \og 2 d N , q t = d N \og 2 d N , b t = 0. In this 
way, we can calculate out that the efficiency of BB84 is 25%, similarly the EPR protocol 
is 50%. To the best of our knowledge, only two protocols reach the limit value of rj — 1, 
one protocol by Cabello (high capacity Cabello protocol, HCCP) [16] and one by Long and 
Liu (high capacity Long Liu protocol HCLLP) [17]. Both protocols exploit the fact that a 
possible eavesdropper with no access to the whole quantum system at the same time, cannot 
recover the whole information without being detected, and both employ a larger alphabet, 
a few- dimensional orthogonal basis of pure state. The GCORE has the same characters, so 
we can also obtain the full efficiency from this point of view. 

Another feature of the scheme is its high capacity since the four possible states of the 
EPR pairs carry two bits of information(log 2 4 = 2), eight possible states of GHZ-basis 
states carry three bits of information(log 2 2 3 = 3). Similarly, the nine possible states of 
the 2-qutrit general Bell-basis states carry log 2 9 bits of information, the 27 possible states 
of the 3-qutrit general maximally entangled basis states carry log 2 3 3 bits of information, 
so we can think the possible states of the iV-qudit maximally entangled basis state carry 
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\og 2 d bits of information. In short, M adopted A^-qudit maximally entangled state can 
send M log 2 d N bits of information in our GCORE scheme. On average, per particle of 
GCORE protocol carries (log 2 d N )/Nd N bits of information. Whereas in the EPR scheme 
(BB84) each adopted EPR pair (particles) carried only one bit of information, that is, 0.5 
bit information per particle carries. But if we use the control key to control the GCORE 
operation of a group of units. We can save a large amount of resources. From this sense, we 
think the proposed scheme is better. 

In QKD, our scheme is just one-to-one protocol, there are other protocols using different 
ways to distribute secret keys [1-3,6,7-17]. As we know, Townsend's protocol [30] is a one- 
to-any protocol, where Alice acts as a single controller to establish and update a distinct 
secret key with each network user. An any-to-any protocol has been proposed to allow 
any two users to establish a secret key over an optical network by Phoenix et al.[31]. The 
present scheme can be generalized to distribute secret keys to multiple legitimate users. It 
is different from Townsend and Phoenix's protocol in that the secret keys are common to all 
legitimate users. The procedure is given in the following. We demonstrate it using EPR pair 
for simplicity, after Alice has sent the keys to Bob, Bob can create an EPR pair sequence 
that carries the raw keys. Then he sends this EPR pair sequence to another legitimate 
user, Clare, using the same procedure and device as before. The key protocols common to 
Alice, Bob and Clare are those Bell-basis measurement results that are not chosen to check 
eavesdropping. In this way, the protocol can be generalized to a multiparty common key 
distribution protocol. Note that all of the GCORE protocols have a final step, i.e. error 
correction and privacy amplification [30], we shall not discuss these points, which are the 
same as in all cryptographic protocols, except that we have to use qutrits (qudits) instead 
of bits, and therefore parity checks becomes triality checks, that is sums of modulo3 (d). 

In summary, we extend the idea of CORE to A-qubit, AT-qutrit quantum systems, 
propose the detailed protocols and give the corresponding security analysis of 3-qubit, 
2-qutrit maximally entangled states, finally, we obtain the GCORE using the general 
expression of multi-particle and high dimension maximally entangled basis state by using 
repeatedly a prior shared control key in this paper. The generalized version has great 
capacity and high efficiency In addition, the control key can be used to control the GCORE 
operation of a group of units, so it greatly simplifies the experimental realization and 
enables quantum key distribution in a more efficient way. 
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